Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trashpanda #1154

Merged
merged 11 commits into from
Apr 25, 2021
Merged

Trashpanda #1154

merged 11 commits into from
Apr 25, 2021

Conversation

krishnasism
Copy link
Contributor

No description provided.

@codecov-commenter
Copy link

codecov-commenter commented Apr 18, 2021

Codecov Report

Merging #1154 (4534623) into master (6d0c470) will decrease coverage by 0.05%.
The diff coverage is 56.88%.

Impacted file tree graph

@@            Coverage Diff             @@
##           master    #1154      +/-   ##
==========================================
- Coverage   50.24%   50.18%   -0.06%     
==========================================
  Files         454      456       +2     
  Lines       36631    36802     +171     
==========================================
+ Hits        18406    18470      +64     
- Misses      18225    18332     +107     
Impacted Files Coverage Δ
modules/sfp_trashpanda.py 37.33% <37.33%> (ø)
test/unit/modules/test_sfp_trashpanda.py 100.00% <100.00%> (ø)
modules/sfp_haveibeenpwned.py 16.17% <0.00%> (-10.86%) ⬇️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6d0c470...4534623. Read the comment docs.


meta = {
'name': "Trashpanda",
'summary': "Queries got-hacked.wtf to gather intelligence about metions of target in pastesites",
Copy link
Owner

@smicallef smicallef Apr 19, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Typo (metions) and please mention TrashPanda in the summary, not the website.

'references': [
"http://api.got-hacked.wtf:5580/help"
],
'favIcon': "https://seon.io/assets/favicons/favicon-16x16.png",
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wrong favicon

'summary': "Queries got-hacked.wtf to gather intelligence about metions of target in pastesites",
'flags': ["apikey"],
'useCases': ["Footprint", "Investigate", "Passive"],
'categories': ["Real World"],
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why is this Real World?

'name': "Trashpanda",
'summary': "Queries got-hacked.wtf to gather intelligence about metions of target in pastesites",
'flags': ["apikey"],
'useCases': ["Footprint", "Investigate", "Passive"],
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Footprint is not applicable here.

'categories': ["Real World"],
'dataSource': {
'website': "https://got-hacked.wtf",
'model': "COMMERCIAL_ONLY",
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should be FREE_AUTH_LIMITED

'logo': "https://got-hacked.wtf/wp-content/uploads/2020/07/cropped-IMG_7619.jpg",
'description': "The bot searches different paste sites for leaked credentials."
"The API itself gives access to all unique credentials the bot ever detected.",
}
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Instructions to obtain the API key are to follow the instructions at https://got-hacked.wtf/


# Option descriptions
optdescs = {
'api_key_username': "got-hacked.wtf API Key Username",
Copy link
Owner

@smicallef smicallef Apr 19, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please use TrashPanda instead of got-hacked.wtf. Also since it's not technically an API key you get, you can leave the two options as Username and Password, not mentioning API Key.

# produced.
def producedEvents(self):
return [
"LEAKSITE_CONTENT",
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't see this being generated? It should be (see sfp_pastebin for example).


# Option descriptions
optdescs = {
'username': "Trashpanda API Username",
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These keys need to be consistent with those in opts.

@smicallef smicallef merged commit 4b3dec3 into smicallef:master Apr 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants